What’s Vulnerable › Products

TinyPNG – JPEG, PNG & WebP image compression vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your TinyPNG – JPEG, PNG & WebP image compression version is affected

Latest TinyPNG – JPEG, PNG & WebP image compression vulnerabilities

• CVE-2026-7311 — TinyPNG <= 3.6.13 - Authenticated (Author+) Arbitrary File Deletion via 'convert.path' in 'tiny_compress_images' Post Meta (CVSS 8.1)